$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa File: c08b4e8b-14c1-3c61-8e49-3534647074e3.roa (raw, json) Hash identifier: qYMoNwFdpxVhu0B9dllDcyAuerikfvfi7p9ZBO+/DcI= Subject key identifier: DD:1A:CB:92:5A:AB:0C:D4:A8:B2:56:58:5D:BC:1F:3C:69:02:E4:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DB8824AF835B2D23CAFE40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 35.198.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:88:24:af:83:5b:2d:23:ca:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=18e31b27-6d0c-43c0-8552-65201324f6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:1b:1e:fc:99:e8:18:0d:ce:98:5e:56:b1: 85:31:e5:2d:8c:08:32:59:37:7e:b5:93:b2:67:03: b0:62:8b:f4:2c:7c:6c:a4:5a:ca:7f:76:aa:23:f6: 02:13:c9:1b:62:92:77:f9:31:2e:39:25:4c:93:19: f7:0f:72:38:cf:1f:21:7a:aa:e2:99:61:60:b8:17: 19:73:66:62:af:05:7e:b2:b9:62:82:24:c3:7d:db: 6a:00:d3:57:72:bb:f9:a2:69:cc:12:91:26:f0:be: e4:74:5a:0d:08:b2:e9:32:d1:48:ef:48:30:57:09: 72:ce:4c:45:c0:50:3f:ab:e3:c6:32:12:dc:1a:8b: 89:be:52:f7:24:f3:43:1b:93:ed:a2:2a:51:bb:88: 4b:73:f7:f8:12:6f:7e:2f:24:26:8c:17:dc:17:16: 10:ca:43:77:74:56:f2:6b:77:67:63:70:ff:35:90: d3:aa:87:9b:eb:bc:e6:a9:35:02:92:f0:53:ab:9c: b7:5d:37:2e:d0:1b:32:61:0d:ec:7d:d3:b6:56:c1: 81:47:85:f2:a3:4c:e3:ae:c7:e3:6f:ad:44:cd:ab: a6:00:6f:d0:92:49:61:e4:e2:67:4f:4b:12:57:a7: f5:f4:fd:3e:ed:33:14:4a:4e:c7:d3:b9:21:fb:0c: f2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1A:CB:92:5A:AB:0C:D4:A8:B2:56:58:5D:BC:1F:3C:69:02:E4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f0:06:0b:2b:e3:06:00:b6:df:5d:c8:d9:56:55:3f:be:1e: 43:db:2b:53:07:d9:39:1c:fc:0f:4a:57:41:70:7e:44:1d:0b: 37:69:dc:73:d6:b6:ca:2d:ce:7b:1b:a2:76:37:57:81:29:5b: a1:d5:8f:33:37:3c:17:eb:ac:ec:b5:4b:64:f9:7f:df:bf:3b: 16:05:c4:df:41:df:74:f7:ef:fd:ba:3e:d6:62:dd:63:b1:02: 23:94:77:0b:1f:aa:60:aa:36:83:ea:ba:50:69:18:9d:c5:13: fc:d1:91:04:a3:a6:37:8b:05:4f:66:5b:f7:ed:eb:f1:1b:85: d6:40:c3:f8:3a:ef:23:03:ca:1d:79:92:5c:fe:47:24:20:06: e5:a9:fd:a7:f0:2f:6e:0e:68:63:ba:d8:e2:4d:98:48:5c:75: 55:cc:fd:91:9f:36:2f:bd:5e:9b:23:c4:e6:02:14:26:69:b1: 57:df:c1:34:94:7e:a6:ac:14:94:87:83:46:01:0f:30:e1:98: 88:4a:b7:a7:f6:ef:f0:b0:a8:b0:b1:f6:8b:28:6e:d9:9d:c5: ee:b6:19:5b:39:f3:d8:96:e7:42:15:fd:e7:ae:dc:cf:c2:76: 8b:3c:77:b1:53:95:32:9b:e8:a8:2a:e5:d7:1b:52:4b:46:d3: 39:d9:c4:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24gkr4NbLSPK/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MThlMzFiMjctNmQwYy00M2MwLTg1NTItNjUyMDEzMjRmNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqIbHvyZ6BgNzpheVrGFMeUtjAgyWTd+tZOy ZwOwYov0LHxspFrKf3aqI/YCE8kbYpJ3+TEuOSVMkxn3D3I4zx8heqrimWFguBcZ c2ZirwV+srligiTDfdtqANNXcrv5omnMEpEm8L7kdFoNCLLpMtFI70gwVwlyzkxF wFA/q+PGMhLcGouJvlL3JPNDG5PtoipRu4hLc/f4Em9+LyQmjBfcFxYQykN3dFby a3dnY3D/NZDTqoeb67zmqTUCkvBTq5y3XTcu0BsyYQ3sfdO2VsGBR4Xyo0zjrsfj b61EzaumAG/Qkklh5OJnT0sSV6f19P0+7TMUSk7H07kh+wzyFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0ay5JaqwzUqLJWWF28HzxpAuQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzA4YjRlOGItMTRjMS0z YzYxLThlNDktMzUzNDY0NzA3NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8YQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjwBgsr4wYAtt9dyNlWVT++HkPbK1MH2Tkc/A9KV0FwfkQdCzdp3HPW tsotznsbonY3V4EpW6HVjzM3PBfrrOy1S2T5f9+/OxYFxN9B33T37/26PtZi3WOx AiOUdwsfqmCqNoPqulBpGJ3FE/zRkQSjpjeLBU9mW/ft6/EbhdZAw/g67yMDyh15 klz+RyQgBuWp/afwL24OaGO62OJNmEhcdVXM/ZGfNi+9XpsjxOYCFCZpsVffwTSU fqasFJSHg0YBDzDhmIhKt6f27/CwqLCx9osobtmdxe62GVs589iW50IV/eeu3M/C dos8d7FTlTKb6Kgq5dcbUktG0znZxIQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:07 2025 by rpki-client